Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/bf603e79-64ee-3723-9c4c-43e85a1ac3fa.roa
File:                     bf603e79-64ee-3723-9c4c-43e85a1ac3fa.roa (raw, json)
Hash identifier:          UwkiTzTx9FmA2/TSuz3Tnmu6ZMWO5jN0OdiuwK+n8q0=
Subject key identifier:   DD:F1:9B:F4:CD:E4:A5:70:B2:FE:CB:84:10:AB:DA:5D:CF:78:64:48
Certificate issuer:       /CN=2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3
Certificate serial:       010D0C9F4328584C5A969245DE1A9803A5B08700
Authority key identifier: 50:40:61:FE:24:9C:0C:4A:E8:29:0B:CE:37:69:E9:EC:15:53:2F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/bf603e79-64ee-3723-9c4c-43e85a1ac3fa.roa
Signing time:             Tue 30 Dec 2025 02:00:30 +0000
ROA not before:           Tue 30 Dec 2025 02:00:30 +0000
ROA not after:            Mon 30 Mar 2026 01:00:30 +0000
asID:                     393319
IP address blocks:        77.233.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:5a:96:92:45:de:1a:98:03:a5:b0:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3
        Validity
            Not Before: Dec 30 02:00:30 2025 GMT
            Not After : Mar 30 01:00:30 2026 GMT
        Subject: CN=075afa58-bfd9-4b38-a115-ca4c759736bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f9:23:85:36:19:c0:e4:44:30:3d:d1:ee:85:
                    e6:7f:c6:84:fb:e5:6a:7a:a0:6e:b1:33:0d:31:7a:
                    63:a5:5a:5c:a3:b0:56:8d:a4:cc:f7:64:50:3a:48:
                    29:6e:e7:d2:58:0a:11:18:8f:d2:1a:c6:0e:19:15:
                    62:e0:31:d8:f3:c0:b9:37:9f:16:2e:c9:b7:f8:99:
                    b2:e9:85:1a:78:3e:b4:78:83:4a:69:a5:05:54:f5:
                    75:44:4a:0d:ad:4f:3c:0e:19:65:2b:25:72:9d:f8:
                    db:6d:60:e1:59:12:b1:38:d8:12:49:0f:da:02:b5:
                    f6:3f:3a:b8:5e:42:26:aa:04:1d:bf:e0:16:93:aa:
                    e4:23:a7:eb:9e:88:81:31:71:d5:58:28:3d:4e:bf:
                    88:3d:8a:31:e1:bd:6b:f4:4b:57:80:6d:e3:58:9c:
                    1a:0f:dd:9e:0e:2c:af:56:66:b6:f2:28:47:47:3e:
                    dc:3b:0b:01:91:dd:79:ef:88:33:b9:0c:d1:e8:49:
                    bd:3a:4b:23:a8:2e:61:d1:e2:c0:8d:ac:38:f2:c1:
                    be:43:c9:00:c2:45:60:24:ad:6d:22:12:20:74:be:
                    79:69:87:1c:3e:2d:1f:cd:02:7a:d6:9c:51:23:e4:
                    f0:81:8f:bb:c2:1c:7f:f7:72:0e:97:87:f6:b5:61:
                    54:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F1:9B:F4:CD:E4:A5:70:B2:FE:CB:84:10:AB:DA:5D:CF:78:64:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/bf603e79-64ee-3723-9c4c-43e85a1ac3fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.crl

            X509v3 Authority Key Identifier:
                keyid:50:40:61:FE:24:9C:0C:4A:E8:29:0B:CE:37:69:E9:EC:15:53:2F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.233.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:09:4d:fa:07:69:40:16:07:5e:9f:2b:bd:5f:6e:ca:f5:c0:
         e9:6e:73:8a:6f:01:c1:6e:95:75:c7:c6:dc:4b:8b:c7:8c:94:
         a0:f4:a8:03:ec:b8:53:3b:09:c9:ff:78:95:42:28:00:44:3f:
         98:f9:a7:38:f3:71:cc:88:16:32:13:da:9f:c3:1d:4f:5c:35:
         14:aa:6a:9a:4d:f8:e3:8c:df:0a:ba:67:97:4b:22:62:bb:ab:
         2e:d1:a3:96:b6:41:29:56:0b:04:14:2e:f3:a1:59:8d:e7:19:
         2d:e0:2b:fc:c4:34:2c:46:d2:3a:be:81:6b:93:ee:e6:af:b6:
         b7:4e:71:b3:e1:2f:75:d8:f1:8b:6d:fa:6e:0a:d0:b7:ee:f0:
         54:11:6e:b3:1c:c4:5f:06:81:4f:33:1b:09:6b:2b:67:a5:35:
         83:a5:7f:9e:7c:86:af:6a:d2:2d:e3:f9:42:c1:2d:b3:a3:35:
         b2:83:81:b8:3d:ed:7d:40:62:27:41:f1:7b:0e:ea:9e:ae:e5:
         d3:30:85:8a:9b:7e:6a:a0:1f:d0:14:15:af:89:11:bc:aa:10:
         1d:d9:e4:c7:23:80:17:79:32:82:8f:1e:9d:12:91:f9:c5:20:
         49:1e:ea:38:ab:12:ba:68:7c:ea:97:e6:ec:9f:6a:b3:36:71:
         3c:aa:99:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:29:17 2026 by rpki-client